In accordance with the LGPD — Law No. 13,709/2018

Privacy Policy of 33cc — Data Protection

33cc handles your data with transparency and accountability. This document explains what we collect, why we collect it, how we use it, and what your rights are as a data subject — in plain English, no fluff.

Last updated: January 2026
SSL 256-bit LGPD Compliant
In this document
What data we collect
How and why we use
Third-party sharing
Security and storage
Cookies and tracking
Your rights under the LGPD
🔒SSL 256-biton all transactions100% secure
🇧🇷LGPDLaw No. 13,709/2018full compliance
🚫Your dataare never sold tounauthorized third parties
⚡Pix availabledeposits and withdrawalswith maximum security
🛡️KYCsecure verification ofidentity
👁️Transparencyyou know whatwhat we collect and why
✅Your Rightsaccess, correction, and deletionguaranteed by the LGPD
💬Supportprivacy inquiriesanswered within 15 days
🔒SSL 256-biton all transactions100% secure
🇧🇷LGPDLaw No. 13,709/2018full compliance
🚫Your dataare never sold tounauthorized third parties
⚡Pix availabledeposits and withdrawalswith maximum security
🛡️KYCsecure verification ofidentity
👁️Transparencyyou know whatwhat we collect and why
✅Your Rightsaccess, correction, and deletionguaranteed by the LGPD
💬Supportprivacy inquiriesanswered within 15 days

How 33cc looks after your data

Six principles that guide how personal data is handled on the platform

Minimal and Necessary Collection

33cc collects only the data strictly necessary to operate your account, process payments, and meet legal obligations — nothing beyond what is needed for the platform to work well for you.

256-bit SSL Encryption

All data transmitted between your browser and 33cc's servers is protected by 256-bit SSL encryption — the same standard used by digital banks like Nubank and Itaú. Your financial and personal data travels with complete security.

Your Guaranteed Rights (LGPD)

You have the right to access, correct, port, and request the deletion of your data at any time. 33cc responds to all requests within 15 business days, as required by the General Data Protection Law.

No Data Selling

33cc does not sell, rent, or transfer your personal data to third parties for commercial purposes. Sharing occurs only with essential technical providers — and always under strict confidentiality agreements.

Retention with a Defined Period

Data is retained only for as long as necessary for each purpose, or for the period required by law. Once that period expires and there is no legal obligation to retain it, the data is permanently deleted or anonymized.

Incident Notification

In the event of any security incident that may affect your data, 33cc will notify the impacted users and the National Data Protection Authority (ANPD) within the timeframes required by the LGPD.

1Introduction and 33cc's Commitment

A 33cc — Sports Betting and online casino platform accessible at 33cc.best — understands that privacy is not just a legal obligation. It is an essential part of the trust we build with our users. This Privacy Policy explains, clearly and directly, how we collect, use, store, and protect the personal data of everyone who uses our platform.

This document was prepared in compliance with the General Data Protection Law (LGPD — Law No. 13.709/2018) and with the Brazilian Internet Civil Rights Framework (Law No. 12.965/2014). It applies to all registered users of 33cc, including those who browse the platform without creating an account, and covers all available products: Sports Betting, live betting, slots, Live Casino, crash games, jackpots, and the VIP Program.

By creating an account on 33cc or using any feature of the platform, you confirm that you have read and understood this Privacy Policy. If you have any questions, please reach out via email contato@33cc.best before completing registration.

Quick summary: 33cc collects only what's necessary, uses your data to keep the platform running smoothly, never sells your information to anyone, and upholds all your rights under the LGPD.

2What Personal Data We Collect

33cc collects personal data at different points during your interaction with the platform. Here is what is collected and when:

Category Data Collected When
Identification Full name, CPF, date of birth, RG or CNH (KYC) At registration and identity verification
Contact Email address, mobile number (optional) At registration
Address ZIP code, state, city, proof of address During KYC verification for withdrawals
Financial Pix key, card details (tokenized), deposit and withdrawal history When making transactions
Behavioral Betting history, games accessed, frequency of use, product preferences During platform use
Technical IP address, device type, operating system, browser, session cookies When accessing the platform

Credit and debit card data is never stored directly on 33cc's servers — it is tokenized and managed by our partner payment processor in a PCI-DSS certified environment. 33cc does not have access to your full card number after the first transaction.

33cc does not collect biometric data, health data, precise geolocation information, or users' private communications.

3How and Why We Use Your Data

Every piece of data collected by 33cc has a specific purpose. We do not use your data for anything beyond what is described below:

  • Operating your account: account creation, authentication, balance management, betting history, and live betting on Brasileirão, UFC, slots, and Live Casino;
  • Processing payments: deposits via Pix, boleto bancário, credit/debit card, PicPay, Mercado Pago, and TED, as well as withdrawals to your registered Pix key or bank account;
  • Identity verification (KYC): confirm that you are at least 18 years old and that your registration details are accurate, in compliance with anti-money laundering regulations;
  • Personalize your experience: recommend promotions and boosted odds based on your betting profile — for example, notifying you about odds boosts on the Brasileirão if you bet on football, or free slots spins if you regularly play PG Soft;
  • Account communications: registration confirmations, withdrawal notices, security alerts, and VIP Program updates;
  • Marketing communications: only with your explicit consent — you may withdraw it at any time through your account settings;
  • Security and fraud prevention: detect anomalous behavior, multiple accounts, and the use of bots or automated scripts;
  • Compliance with legal obligations: retention of financial transaction records for the period required by Brazilian law.

33cc does not use your data to build predictive health, financial, or behavioral profiles for any purpose beyond those listed above, nor does it share your data with external advertising platforms.

4Legal Basis for Processing (LGPD)

The LGPD requires that every processing of personal data have a justified legal basis. 33cc processes your data based on the following grounds set out in Article 7 of Law No. 13.709/2018:

  • Contract performance: data required to create and operate your account, process bets and payments — without it, the contractual relationship cannot exist;
  • Legal obligation: retention of financial records, KYC verification, and compliance with anti-money laundering regulations required under Brazilian law;
  • Legitimate interest: fraud prevention, platform security, detection of multiple accounts, and protection of other users — provided it does not override your fundamental rights and freedoms;
  • Consent: marketing communications and non-essential cookies — you may withdraw consent at any time without affecting your use of the account.

When the legal basis is consent, withdrawal does not affect processing already carried out under the prior consent — only future processing.

5Data Sharing with Third Parties

33cc does not sell, rent, or transfer your personal data to third parties for commercial or advertising purposes. Sharing occurs only in the following situations, all of which are necessary for the platform to operate:

  • Payment processors: to process deposits and withdrawals via Pix, boleto, card, PicPay, Mercado Pago, and TED — we share only the minimum data required for the transaction;
  • Game providers: PG Soft, Pragmatic Play, Evolution Gaming, and other casino providers receive only the session identifier required to run the games — they have no access to your CPF, full name, or financial data;
  • KYC verification service: a specialist partner that processes identity documents in a secure, certified environment, under a confidentiality agreement with 33cc;
  • Technology infrastructure: hosting and cloud service providers that process data under LGPD-compliant data processing agreements;
  • Compliance with a court order or competent authority: when required by law, court order, or a Brazilian regulatory authority.

All partners who receive data from 33cc are contractually required to use that information solely for the specific agreed purpose and to apply security measures equivalent to those of 33cc. We do not share data with ad platforms, data brokers, or affiliate networks that are not directly tied to the platform's operations.

6Storage and Retention Period

Data collected by 33cc is stored on secure servers housed in certified data centers, with access restricted to authorized personnel and continuous monitoring in place. Retention periods vary depending on the purpose:

  • Registration data and active account: retained for as long as the account remains active;
  • Financial transaction data: retained for 5 years after the transaction, in accordance with compliance obligations and Brazilian accounting standards;
  • KYC verification data (documents): retained for 5 years after account closure, as required by anti-money laundering regulations;
  • Betting history: retained for 2 years after each bet for dispute resolution and internal audit purposes;
  • Marketing data (with consent): retained until consent is withdrawn or the account is closed;
  • Technical and access logs: retained for 6 months, in accordance with the Brazilian Internet Act (Law No. 12.965/2014).

Once each retention period expires and there is no legal obligation to keep the data, it is permanently deleted or irreversibly anonymized — so it can no longer be linked to you as an identifiable individual.

Upon requesting voluntary account closure, 33cc initiates the deletion process for data eligible for removal and notifies you which data must be retained due to legal obligations and for how long.

7Data Security

33cc implements a robust set of technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction:

  • 256-bit SSL/TLS Encryption for all communication between your device and 33cc's servers;
  • Data encryption at rest for sensitive information stored in the database;
  • Role-based access control (RBAC): only staff with an operational need have access to specific data, with mandatory multi-factor authentication;
  • Real-time security monitoring: intrusion detection systems and anomalous behavior analysis running 24 hours a day;
  • Periodic security audits: penetration testing and vulnerability reviews carried out regularly by a specialist team;
  • Encrypted backups with redundant storage across geographically separate locations.

In the event of a security incident that could compromise your data — such as unauthorized access to our systems — 33cc will notify affected users by email and report the incident to the National Data Protection Authority (ANPD) within the timeframe established by the LGPD. The notification will include the nature of the incident, the data potentially affected, and the measures taken to contain it.

On the user's end, account security also depends on keeping your password confidential. 33cc recommends using a unique, strong password for the platform — at least 12 characters combining uppercase and lowercase letters, numbers, and symbols. If you suspect unauthorized access, contact us immediately at contato@33cc.best.

8Cookies and Tracking Technologies

33cc uses cookies and similar technologies to ensure the platform works correctly, understand how it is used, and personalize your experience. Cookies are divided into the following categories:

You can manage your cookie preferences through the banner shown on your first visit to the platform or via the account settings area. Disabling analytics and personalization cookies does not affect 33cc's core functionality or your access to betting, payments, or the VIP Program.

9Your Rights as a Data Subject (LGPD)

The LGPD grants you, as the data subject whose information is processed by 33cc, the following rights — all of which can be exercised at any time via email contato@33cc.best:

01
Confirmation and Access
Find out whether 33cc processes your data and receive a copy of the information we hold about you.
02
Correction
Request the correction of incomplete, inaccurate, or outdated information registered on the platform.
03
Anonymization or Deletion
Request the deletion or anonymization of data that is unnecessary, excessive, or processed in violation of the LGPD.
04
Portability
Request the transfer of your data to another service provider, in accordance with ANPD regulations.
05
Sharing Information
Know which public and private entities 33cc has shared your data with.
06
Consent Withdrawal
Withdraw consent for processing based on that legal basis at any time, at no cost.
07
Right to Object
Object to processing carried out on the basis of legitimate interest if you believe your rights take precedence.
08
ANPD Complaint
File a complaint with the National Data Protection Authority if you believe your rights have been violated.

To exercise any of these rights, submit a request to contato@33cc.best with your full name, registered CPF, and a description of the right you wish to exercise. 33cc will respond within 15 business days. In the event of a deletion request, we will inform you which data must be retained by legal obligation and how long that retention period lasts.

10Protection of Minors

The 33cc platform is strictly prohibited for users under 18. We do not knowingly collect personal data from minors. Our identity verification process (KYC) includes date-of-birth confirmation via official ID, specifically to ensure that only users aged 18 and over can move funds on the platform.

If 33cc determines that an account was created by a minor — whether through a report, KYC result, or any other means — the account will be immediately closed, all balances will be frozen, and the legal guardians will be notified. Data collected from the account will be deleted, except for what must be retained by legal obligation.

If you believe a minor has created an account on 33cc, please contact us at contato@33cc.best with the information available. We will treat your case as a priority.

Prohibited for users under 18. 33cc enforces strict age verification and takes immediate action upon identifying accounts created by minors.

11International Data Transfers

33cc's operations may involve data processing by partners with infrastructure in other countries — particularly game providers and cloud services. When such transfers occur, 33cc ensures that:

  • The destination country offers an adequate level of data protection, as assessed by the ANPD, or;
  • There are specific contractual clauses requiring the recipient partner to apply data protection standards equivalent to those of the Brazilian LGPD, or;
  • Processing is necessary for the performance of a contract with the data subject (for example, operating games provided by international suppliers).

International transfers of financial data additionally comply with PCI-DSS standards and applicable Banco Central do Brasil regulations. No international transfer involves the sale or sharing of data with third parties for purposes not described in this Policy.

12Policy Updates

33cc may update this Privacy Policy periodically to reflect changes in Brazilian law, its data processing practices, or the services it offers. The date of the most recent update is always shown at the top of this document.

When changes are substantial — directly affecting your rights or the way we use your data — you will be notified by email at least 7 days before the changes take effect. For minor updates, the revision is published directly on this page without prior notice.

Continued use of the platform after the effective date of a new version of this Policy constitutes acceptance of the updated terms. If you disagree with any change, you may request account closure by emailing contato@33cc.best before the effective date.

13Contact, DPO and Privacy Channel

33cc has appointed a Data Protection Officer (DPO), as provided for under the LGPD, responsible for ensuring compliance with this Policy and for handling data subject requests. To reach 33cc's privacy channel:

  • Email: contato@33cc.best (subject: "Privacy — LGPD")
  • Live chat: available on the platform 24 hours a day, 7 days a week, in Portuguese
  • Response time: up to 15 business days for formal personal data requests

For urgent security matters — such as suspected unauthorized access to your account or an unrecognized transaction — use live chat for immediate assistance. The 33cc support team operates in Portuguese and resolves most account security issues in under 10 minutes.

If you believe your privacy rights have been violated and do not receive a satisfactory response from 33cc within the required timeframe, you may file a complaint with the National Data Protection Authority (ANPD), accessible through the Brazilian government portal.

To exercise any right provided under this Policy or the LGPD, send an email to contato@33cc.best with your name, registered CPF, and the nature of your request. We will respond within 15 business days.

Frequently asked questions about Privacy at 33cc

The most frequently asked questions about how we handle your data

No. 33cc does not sell, rent, or transfer your personal data to third parties for commercial or advertising purposes. Sharing occurs only with strictly necessary operational partners — such as payment processors for Pix, boleto, and card transactions, game providers for slots and Live Casino, and the KYC verification service. All such partners are contractually required to use the data solely for the specific agreed purpose.

Send an email to contato@33cc.best with the subject line "Data Deletion — LGPD", including your full name and registered CPF. 33cc will respond within 15 business days. Please note that certain data must be retained for periods prescribed by law — such as financial transaction records required by compliance regulations. In those cases, we will inform you which data will be kept, for how long, and on what legal basis. All other data will be deleted or anonymized immediately.

No. Your full credit or debit card details are never stored on 33cc's servers. They are tokenized — converted into a secure code — by our certified payment processing partner, which holds PCI-DSS certification. 33cc receives only a token representing the card, with no access to the full card number, CVV, or expiration date. This is the same standard used by digital banks and e-commerce platforms across Brazil.

You can manage your cookie preferences through the banner shown on your first visit or in your account settings. Essential and security cookies cannot be disabled, as they are required for the platform to function — such as keeping your session active and detecting fraud attempts. Analytics and personalization cookies can be disabled without affecting your use of Sports Betting, payments, slots, or the VIP Program. To disable cookies at the browser level, refer to the privacy settings in Chrome, Firefox, Safari, or Edge.

After voluntary account closure, 33cc begins the deletion process for data that is not subject to any legal retention obligation. Data that must be retained by law — such as financial transaction records and KYC documents — is kept for the applicable legal periods (generally 2 to 5 years) and then permanently deleted. During the retention period, such data is accessed only when strictly necessary for audits or regulatory requirements. You will receive an email confirmation detailing what has been deleted and what remains on file, along with the respective retention periods.
Your data protected from the very first access

Safe and transparent betting at 33cc

At 33cc, privacy isn't fine print. From sign-up to Pix withdrawals, your data is handled responsibly and you stay in full control. Create your account and bet on the Brasileirão, slots, and much more — with the confidence of knowing the platform plays fair.

  • SSL 256-bit protected data
  • Full LGPD compliance
  • Pix withdrawals processed in up to 5 minutes
  • Your rights respected 100%
🔒
Create Free Account I already have an account — Log In

By registering, you agree to this Policy. +18.

33cc Privacy Commitment

33cc handles all your personal data with complete confidentiality, in compliance with the LGPD (General Data Protection Law — Law No. 13.709/2018). Your information is used exclusively to operate your account, process transactions, and personalize your experience. No data is sold or shared with third parties for commercial purposes. All transactions are protected by 256-bit SSL encryption.

Also refer to our Terms and Conditions for complete information on platform rules.

Play Responsibly

Betting is entertainment. Set deposit, time, and loss limits in your account settings. Never bet more than you can afford to lose. Prohibited for users under 18.

Responsible Gaming
Português